How to recover MFA from Admin Account at Office 365 Business

Question

Hello Microsoft, 

We have a business subscription for Office 365 for our company.

Unfortunately a 2-Factor auth device for the main admin account was lost.

Any automated password recovery interface from Microsoft redirects back 

into a loop of being forced to enter a 2FA auth token.

The support hotline never redirects to data protection team.

The thread below, shows there is a possibility to open a ticket at data protection team in case

Of tenant lockout:

https://learn.microsoft.com/en-us/answers/questions/5549947/recover-global-admin-microsoft-account-with-lost-m

How can we open we open an such an issue at data protection team ?

Answer 1

Hi @Valerija S,

Thank you for posting your question in the Microsoft Q&A forum

I would like to provide you with the following information to guide you on how to create a support ticket with the Data Protection team:

Please look up the appropriate Microsoft support phone number for your region and call Microsoft first-line support. Then, request that they create a support ticket for you via the following link:

Customer service phone numbers – Microsoft Support

In this case, the Microsoft Data Protection Team is the only team that has the full set of tools and specialized procedures required to verify your identity and securely restore administrator access to your account.

Please note that forum moderators do not have the authority to directly intervene in user accounts, especially for issues related to:

• Account sign-in
• Password reset
• MFA authentication
• Changing or restoring access permissions

IVR (Automated Phone System) Navigation Tips

To help you work more effectively with the IVR system, you may refer to the guidance below:

• When calling the support number, you may hear an introduction lasting around 30 seconds (for example: “You can visit the link…”). You can skip this part and wait until the system presents the available options.
• Then:
  • Press “1” > as a business email user
  • Press “1” again > to select technical support

In some regions, the initial interaction may be fully automated. Below is a sample dialogue you can prepare in advance:

• What kind of problem are you experiencing? Authenticator
• What products do you use? Office 365 for business
• Is this for an education or company account? For companies
• Are you an administrator? Yes
• Are there any other administrators in your organization? No. I am the only admin in my tenant
• Do you need a service request? Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

During the call, you may be asked to provide some subscription-related information, including:

• Company name
• Billing information
• Phone number
• Alternative email address

This information helps the Data Protection Team verify your identity and securely assist with restoring access.

Temporary Workaround if You Cannot Reach Phone Support

If you are still unable to contact support by phone, you may consider the following temporary workaround:

• Register a new Microsoft 365 tenant (trial version) here: Microsoft 365 Business Plans and Pricing | Microsoft 365
• 
• After the new tenant is created, go to the Admin Center, create a support ticket, and request to work with the Data Protection Team on behalf of your original tenant.
• 

When creating the ticket, it is recommended to use the following title to help route the request more quickly and accurately:

Request to contact the Data Protection Team to restore administrator account access

Important Notes

• The new trial tenant does not grant access to the data or settings of the locked original tenant. It is used only as a temporary method to contact Microsoft Support.
• Be prepared to provide identity verification and proof of administrative ownership for the locked tenant when requested by Microsoft Support.
• Resolution time may be longer since you are contacting support from a different tenant.
• Do not forget to cancel the trial subscription of the new tenant after the issue with the original tenant has been resolved, to avoid unexpected charges.

I hope this information is helpful. Please follow these steps and let me know if it works for you. If not, we can work together to resolve this.   

Thank you for your patience and your understanding. If you have any questions or need further assistance, please feel free to share them in the comments on this post so I can continue to support you.

I look forward to continuing the conversation.

---

 If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

I think that… for a lost‑MFA global admin, the only supported path is opening a “tenant lockout” case from the Microsoft 365 admin center’s Need help pane, which is then routed to the data protection team internally.

Answer 3

To recover Multi-Factor Authentication (MFA) for your Office 365 Business admin account after losing your 2FA device, you will need to contact Microsoft support directly, particularly the Data Protection team. Here are the steps you can follow:

1. Contact Microsoft Support: You can reach out to Microsoft Customer Service by phone. When you call, ensure you specify that you are the only admin and that you need assistance with MFA recovery.
   • Use the automated phone system to navigate to the appropriate options. When prompted, indicate that you have an issue with the Authenticator app and that you are a business account user.
2. Provide Necessary Information: Be prepared to provide your account details and explain that you are locked out due to the loss of your 2FA device. Mention that you need to raise a ticket with the Data Protection team.
3. Alternative Method: If you are unable to reach a live agent, consider creating a temporary account by signing up for a trial subscription. This will allow you to access the admin console of the new tenant and submit a support ticket on behalf of your original tenant.
4. Follow Up: Once you have submitted your request, keep an eye on your email or phone for a response from the Data Protection team, who will assist you in regaining access to your account.

These steps should help you in recovering access to your admin account and resetting your MFA settings.

---

References:

• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A